a. (General) the disclosure of classified data to persons not authorized to receive that data. b. (Automated Information Systems) A violation of the security policy of a system such that an unauthorized disclosure, modification, or destruction of sensitive information has occurred. The unauthorized disclosure, modification, substitution, or use.

This cybercrime compromises the confidentiality of data (through eavesdropping) and integrity of data (by impersonating sender and/or receiver). How does a "man-in-the-middle attack" work? Offenders hijack connections between clients and servers by creating two connections (offender and client, and offender and server).